Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7369111A08FE11EFB2ABBE37017001B1.roa
File: 7369111A08FE11EFB2ABBE37017001B1.roa (raw, json)
Hash identifier: cPtVXnPoiGKndSdoaxY0I28DL1j2AlgE3CNn99Azu70=
Subject key identifier: A4:04:1E:FB:C4:D3:27:29:CB:36:4E:54:10:3B:32:41:CF:92:3E:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8779
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7369111A08FE11EFB2ABBE37017001B1.roa
Signing time: Fri 03 May 2024 03:37:22 +0000
ROA not before: Fri 03 May 2024 03:37:19 +0000
ROA not after: Mon 28 Apr 2025 03:37:19 +0000
asID: 209242
IP address blocks: 156.239.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 May 2024 00:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34681 (0x8779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 3 03:37:19 2024 GMT
Not After : Apr 28 03:37:19 2025 GMT
Subject: CN=66345bf2-6b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:4b:6f:a4:9d:8f:a5:90:69:a4:29:71:dd:
67:5f:0f:71:f0:08:2b:b7:76:87:66:19:9e:c5:e4:
35:7e:c7:64:5b:e4:b6:02:63:d5:14:5c:33:f5:fe:
79:20:3a:39:96:d8:0c:6d:a5:da:06:8a:ef:6b:4b:
ea:6a:87:68:ff:e6:0b:60:5b:f0:78:cc:b4:ea:33:
cf:22:2a:5f:13:af:bb:43:29:5e:d9:1a:7a:91:c8:
6b:85:ca:2d:30:58:de:28:78:c7:ab:08:e9:68:c6:
0b:fb:a0:ea:b1:84:fe:54:fb:68:cf:1b:7c:5b:7c:
75:14:e9:eb:4b:9c:18:38:4d:62:d4:0b:b2:4c:60:
50:97:86:61:0a:98:52:80:a0:1e:81:17:0b:1a:9c:
6a:70:07:1e:a7:85:a0:a3:aa:a7:e6:b3:8f:1a:9e:
24:5b:ae:fe:de:b7:9f:11:44:0c:44:03:e5:98:a7:
b8:95:53:7d:e9:71:32:a1:59:38:bf:64:49:a7:09:
fd:99:1b:07:fd:91:19:5f:b9:21:0b:c8:31:d7:14:
3d:bb:c0:3d:c2:a5:c1:c1:3d:fd:0f:d1:f9:32:e0:
27:49:cd:30:a6:7c:3e:69:b5:05:73:94:60:16:67:
24:be:cb:7e:ad:1e:ec:dd:99:25:04:75:4c:22:44:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:04:1E:FB:C4:D3:27:29:CB:36:4E:54:10:3B:32:41:CF:92:3E:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7369111A08FE11EFB2ABBE37017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.155.0/24
Signature Algorithm: sha256WithRSAEncryption
55:1c:f6:25:89:41:b9:56:ff:1c:fc:78:8a:c2:b8:9c:d6:7f:
65:57:2b:2a:8c:26:c8:2a:6a:a1:e3:dc:f2:b6:03:7f:ae:7f:
aa:4f:86:4d:f5:11:c5:c5:c9:a2:40:d4:42:e9:c3:2c:6d:4e:
e0:76:44:82:60:88:a1:1a:10:7e:90:08:78:6c:56:b4:35:8d:
4d:33:50:6e:dc:36:96:25:f1:0d:8e:d0:33:94:74:b9:dd:ee:
cf:7f:59:bc:f0:86:82:af:04:7d:f8:04:18:67:07:d1:36:9e:
f0:74:b0:ad:d4:40:77:53:ba:49:23:dd:d6:2d:48:67:6b:40:
f6:54:1f:ea:aa:b1:f7:f0:50:6a:e1:95:cf:cf:45:e9:5e:20:
7e:66:97:fe:45:af:d9:43:d6:30:e9:ed:47:b4:dd:3c:2a:4d:
98:e5:01:eb:f8:2e:f9:f5:55:25:09:05:31:6b:e9:fd:3a:d4:
f2:40:76:f6:4e:7b:c8:2e:a8:e7:b2:0f:59:ae:f3:cc:25:8d:
bf:a5:f0:9e:a0:fc:e4:df:38:c1:b3:9f:1a:b6:8c:27:cf:90:
42:df:b9:2f:c1:d7:7f:ea:bf:58:80:2c:62:25:16:53:e2:54:
27:31:dc:95:b6:4a:b5:7f:76:a7:f0:81:7a:01:49:f2:30:ac:
31:1c:06:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 14:39:28 2024 by rpki-client on console-fra.rpki-client.org